Sensitive data is encrypted when transmitted to prevent interception
Requiring encryption for sensitive data crossing any network, with named approved channels and an exception path, covers the encrypted-channel safeguard A.5.14 requires, though the control also covers removable media, physical post and transfer agreements this rule does not reach.
This policy facet sets a management-approved standard requiring encryption for sensitive data crossing any network, with named approved channels and an exception path.